Privacy Policy

Digital Policy and Regulation Strategy Group, S.A. de C.V.

Pursuant to Articles 15 and 16 of the Federal Law on Protection of Personal Data Held by Private Parties (LFPDP) and the provisions of its regulations, we hereby inform you that DIGITAL POLICY AND REGULATION STRATEGY GROUP, S. A de C.V. (hereinafter DPL GROUP) is a legal entity incorporated under the laws of the Mexican Republic with registered office at Avenida Insurgentes Sur No. Exterior: 730 No. Interior: A, Colonia: Del Valle Centro, ALCALDIA Benito Juárez, C.P. 03100, Mexico City, and is responsible for collecting Personal Data and information provided by our members or associates, suppliers, collaborators, and third parties with whom it maintains labor or professional relationships, which constitutes one of its main interests, as well as for the proper use of such data and its corresponding protection through the use of the highest recognized standards in terms of the protection and confidentiality of your personal information.

DEFINITIONS:

For the purposes of this Privacy Notice, the following terms shall have the following meanings, with the understanding that unless otherwise defined in this privacy notice, the terms used in this privacy notice that are not defined herein shall have the meaning attributed to them in the LFPDP:

“PERSONAL DATA.” Any information concerning an identified or identifiable natural person.

“ARCO RIGHTS”. Means the rights of access, rectification, cancellation, and opposition that, in accordance with the provisions of the LFPDP and subject to the exceptions established therein and in this privacy notice, each owner has in relation to the personal data collected by the controller and/or its processors, and which are described below:

“RIGHT OF ACCESS”. This is the right of the owner to know about the personal data related to their person that is held by the controller in question or their processors, as well as to whom it has been shared and for what purpose.

“RIGHT TO RECTIFICATION.” Each data subject has the right to have their personal data rectified when it is inaccurate or incomplete.

“RIGHT TO ERASURE.” Each data subject has the right to request the erasure of their personal data at any time, which will occur once the blocking period has elapsed. Blocking involves the identification and storage of personal data once the purpose for which it was collected has been fulfilled, and its purpose is to determine possible liabilities in relation to its processing, until the legal or contractual limitation period for these has expired. During this period, your personal data will not be processed and, once this period has elapsed, it will be deleted from the corresponding database or file.

Once the corresponding data has been deleted, the data controller will notify the data subject accordingly. If the personal data had been transmitted prior to the date of rectification or deletion and continues to be processed by third parties, the data controller will inform the third party concerned of the request for rectification or deletion so that it can also proceed to do so.

“RIGHT TO OBJECT.” The data subject has the right at any time to request, provided they have a legitimate reason, that the controller cease processing their personal data.

“CONTROLLER.” Means the natural or legal person who decides on the processing of the data subject’s personal data, in this case (DPL GROUP).

“PROCESSOR.” Means the natural or legal person who, alone or jointly with others, processes personal data on behalf of the controller.

“DATA SUBJECT.” Means the natural person who is the owner of the personal data, or who is authorized to provide personal data of a third party in accordance with applicable laws, who provides such personal data to the controller.

CONSENT OF THE DATA SUBJECT:

For the purposes of the provisions of the LFPDP and in particular Article 17 thereof, the owner declares (I) that this privacy notice has been made known to them by the controller, (II) that they have read, understood, and agreed to the terms set forth in this privacy notice, and therefore grants their consent to the processing of their personal data for the purposes of the LFPDP and other applicable legislation. In the event that the personal data collected includes sensitive or financial personal data, by signing the corresponding contract, either in printed format or using electronic means and the corresponding processes for the formation of consent, for example, but not limited to, by providing personal data through dialogue boxes, or viewing and scrolling through terms and conditions on screen, acts will be carried out that constitute the express consent of the owner in terms of the second paragraph of Article 8 of the LFPDP and other applicable legislation, and (III) that you give your consent for (DPL GROUP) to transfer personal data to third parties, whether domestic or foreign, on the understanding that the processing of your personal data by such third parties must comply with the provisions of this Privacy Notice.

If the owner does not object to the terms of this privacy notice within 30 days of it being made available to them, its content will be considered agreed and consented to, in accordance with the third paragraph of Article 8 of the LFPDP. The consent of the owner may be revoked at any time by the owner without retroactive effect, under the terms and in accordance with the procedures established below for this purpose in accordance with this privacy notice.

Notwithstanding any provision of this privacy notice, the owner acknowledges that their consent will not be required for the processing of personal data by the controller or third parties in any of the cases indicated in Article 10 of the LFPDP.

PERSONAL DATA AND HOW IT IS COLLECTED:

(DPL GROUP) may collect Personal Data from the owners of the corresponding information, whether from our members, associates, suppliers, collaborators, applicants, or third parties with whom it maintains relationships of any kind and who are inherent or necessary for the development of its main activity.

Based on the foregoing, the Personal Data referred to above may be collected directly from the owner thereof by any means, whether through the website, email, postal mail, fax, telephone, or any other means provided by science or technology legally recognized for such purposes, for which such Personal Data may include, among other things, the following information: Full name (individuals), company name (legal entities), name of legal representative (if applicable), address or geographical location, information contained in official identification documents, proof of address, Telephone numbers (landline or cell phone), Email addresses, R.F.C. or C.U.R.P., Signatures or initials (scanned, digital, or electronic), Curriculum Vitae references, and Images of the person, if applicable.

To this end, the information referred to may also include: gender, a copy of your official identification, passport number, marital status, age, military service number, driver’s license class and number, hobbies, sports you play, original birth certificate or certified copy, marital status, place and date of birth, nationality, results or data obtained from the socioeconomic study or other studies conducted to determine economic conditions and geographic location (if applicable), as well as health status, name and relationship of the people with whom you live, name and relationship of your financial dependents, name, occupation, and ages of your parents, original marriage certificate or certified copy, name and ages of spouse and children, level of education, institution, career/area, and the document proving your stay or residence in the country (foreigners).

Likewise, in the event that (DPL GROUP) collects Personal Data related to any other information that is considered sensitive in nature, it will obtain the express consent of the owner, who must send the corresponding information in writing with a handwritten signature, or to the email address: avisodeprivacidd@digitalpolicylaw.com (DPL GROUP).

In this context, the following items, among others, may be understood as Sensitive Information: different abilities, type of disability, proof of health status, medical studies, height, weight, size, illnesses or conditions of your own and of the references you provide us, medical treatments, injuries or accidents, participation in legal proceedings or problems.

PURPOSE OF THE PRIVACY NOTICE; PURPOSE OF PERSONAL DATA:

The purpose of this privacy notice is to establish the terms and conditions under which (DPL) (or its designated representative) (DPL GROUP) (I) will receive and protect the personal data of the data subject, in order to protect their privacy and their right to informational self-determination, in compliance with the provisions of the LFPDP; (II) use the personal data of the owner, and (III) transfer personal data to third parties, where applicable.

The controller will collect and process the data subject’s personal data, i.e., information that can reasonably identify them, through the receipt of documents, whether in printed and/or digital format. 

The following are examples, by way of illustration but not limitation, of information that the controller may collect: First and last names; date of birth; home, work, or tax address; personal or work email address; social media identification code; home or work telephone number; cell phone number; credit card, debit card, or bank account numbers; federal taxpayer registration number (RFC); unique population registry code (CURP); Mexican social security institute membership number; and consumption and browsing preferences when using the telecommunications services we provide, as well as other information of a similar nature.

Personal data may be collected when the data subject visits the points of sale of the data controller or authorized distributors, when they communicate by telephone with the data controller or its representatives (including customer service centers), or by direct delivery to the controller or through the use of emails and/or short text messages (SMS), or through the use of their websites, through the voluntary provision of information through the dialogue windows enabled on the sites, or through the use of automatic data capture tools. These tools allow you to collect information that your browser sends to these websites, such as the type of browser you use, the user language, access times, and the IP address of websites you used to access the sites of the controller or processors. 

The documentation that may be collected by (DPL GROUP) for the verification of the identity of the owner of the personal data includes the voter registration card; the national military service identity card; the RFC registration card; the CURP registration card; proof of address; water bill, property tax bill, or electricity bill; and the special credit report issued by a credit reporting agency.

The controller may also collect personal data from publicly available sources and other sources available on the market to which the data subject may have given their consent to share their personal information or which may have provided anonymous demographic information associated with a specific geographical area.

The data subject’s personal data is collected and processed by the controller or its processors for the purpose of enabling the data subject to carry out various activities with the controller, including requesting, purchasing, exchanging, returning products, contracting, offering, canceling services, making online payments, requesting invoices or digital tax receipts, requesting and/or sending quotes, information, or free samples of products and services; request delivery, repair, or fulfillment of product warranties; request the provision of services or fulfillment of service warranties; contact customer service; receive printed or electronic advertising, including communications for online marketing purposes or telemarketing about products and services; create personal profiles; participate in surveys; use the various services of the corresponding websites, including downloading content and formats; notify the controller of problems with its sites; participate in online chats and/or discussion forums about products and services; participate in trivia, contests, raffles, games, and sweepstakes; share your comments or suggestions about products and services; process payments; and any other activity similar in nature to those described in the preceding paragraphs.

PURPOSES:

Primary purposes:

(DPL GROUP) will process the Personal Data of the owner for the purpose of carrying out activities and procedures focused on complying with its statutory and corporate relationships with its customers and suppliers and other services that are the direct object of its main activity, as well as for complying with legal requirements.

In the case of applicants for positions as employees, administrative staff, or accredited professionals who provide their services to (DPL GROUP), the data subject’s data will be processed for the purpose of carrying out the recruitment and selection process and, where appropriate, for their corresponding hiring, including matters relating to the integration of their employment file in question, as well as for compliance with legal requirements.

Secondary purposes:

Likewise, (DPL GROUP) will process the Personal Data of the owner for other purposes related to notification of new services related to those already provided, to inform you of any changes to them, to carry out studies and programs that are necessary to perform periodic evaluations of our services in order to improve their quality and evaluate the quality of the service we provide, including the communication of notices and other related messages; and to keep our records up to date in order to respond to your inquiries and provide answers within the framework of the services provided, as well as to invite you to events, follow up on the business relationship with each partner or member, as appropriate, and maintain general communication.

If you do not wish to receive promotional messages or any other information related to these secondary purposes, you can send us your request to the email address avisodeprivacidad@digitalpolicylaw.com (DPL GROUP).

Similarly, DPL GROUP, either directly or through its agents, may use your personal data for the following purposes, including but not limited to:

1. A) Conducting studies on the demographics, interests, and behavior of its customers, consumers, suppliers, and other third parties with whom it deals;
2. B) To conduct market and consumer studies in order to acquire and offer personalized products and services, as well as advertising and content that is more suited to the needs of its customers, consumers, suppliers, and other third parties with whom it deals;
3. C) To compile internal statistics indicating the services and products most appreciated by the different segments of its customers, consumers, suppliers, and other users of the telecommunications services provided by the data controller;
4. D) Formalize the transactional process with its customers, consumers, suppliers, and other third parties with whom it deals;
5. E) Manage the process of requesting, evaluating, and awarding contracts to suppliers and other third parties with whom it deals;
6. F) Where applicable, verify the credit and/or payment capacity of the holder, which may be done through credit reporting agencies, in accordance with the law regulating credit reporting agencies;
7. G) Verify commercial transactions carried out by the owner with the responsible party;
8. H) Maintain a record of operations and information reviewed in the different sections of the telecommunications services provided by the responsible party and collected through automatic data capture tools;
9. I) Send the data subject notification of offers, notices, and/or promotional messages, which will be sent to them, unless the data subject expressly states their wish not to receive such offers. Occasionally, such offers may contain information from suppliers of the data controller or other third parties.
10. J) Share your personal data with providers of database administration and management services; automated processing and storage of personal data; email authentication and validation; personnel recruitment; auditing services, and other services similar in nature to those described.
11. K) Collect data when browsing websites and web pages, cookies, web beacons, and links in emails.

The controller and/or its agents will retain the data subject’s personal data for as long as necessary to process their requests for information, products, and/or services, as well as to maintain accounting, financial, and audit records in accordance with the LFPDP and current commercial, tax, and administrative legislation. The personal data of the owner collected by the responsible party and/or its agents will be protected by appropriate administrative, technical, and physical security measures against damage, loss, alteration, destruction, or unauthorized use, access, or processing, in accordance with the provisions of the LFPDP and the administrative regulations derived from it.

REQUEST FOR ACCESS, RECTIFICATION, CANCELLATION OR OPPOSITION OF PERSONAL DATA AND REVOCATION OF CONSENT

The owner of the Personal Data may object to the processing of their information for the secondary purposes set out above at any time through the means we have made available to them for the exercise of their “ARCO” rights (Access, Rectification, Cancellation, and Opposition to the processing thereof or to revoke the consent they have given us for that purpose).

To this end, the owner of the Personal Data will have a period of 5 (five) days to express their refusal to the processing of their personal data for the secondary purposes mentioned above, if applicable.

In order to prevent unauthorized access to your Personal Data and to ensure that the information is used for the primary purposes set forth in this Privacy Notice, we have established physical, electronic, and administrative procedures that limit the use or disclosure of such information to third parties or entities other than (DPL GROUP), allowing us to process it properly and for the sole purpose of internal consultation.

To do so, you must send your request in accordance with the terms set forth in Article 29 of the relevant law, addressed to Brenda Vázquez, head of our Personal Data Protection Department, located at Avenida Insurgentes Sur No. Exterior: 730 No. Interior: A, Colonia: Del Valle Centro, ALCALDIA Benito Juárez, C.P. 03100, Mexico City, via email to bvazquez@digitalpolicylaw.com, which we request you confirm by the same means to ensure its correct receipt. 

You must specify the means by which you wish to receive the information and, if you do not provide this specification, (DPL GROUP) will establish the channel it deems appropriate to send you the information covered in this Privacy Notice.

For your own benefit and protection, we may ask you to provide documentation proving the corrections to the data you wish to access, rectify, or cancel, or those to which you wish to object. Likewise, we inform you that (DPL GROUP) may not be able to cancel or block all of your personal data in accordance with the laws applicable to you. Finally, we inform you that the exercise of your “ARCO” rights is free of charge, on the understanding that (DPL GROUP) may only request payment of the justified costs of sending or reproducing the information you request.

Furthermore, (DPL GROUP) assumes that all Personal Data obtained directly from its corresponding owners is true, complete, and accurate, as it is generated independently by the individuals who access our website under their own responsibility. Therefore, it is the responsibility of the latter to communicate any changes to (DPL GROUP).

In accordance with the provisions of Article 8 of the Law for the Protection of Personal Data Held by Private Parties, users, customers, collaborators, suppliers, and other persons related to the services provided by (DPL GROUP) acknowledge that they have read and understand the scope established in this Privacy Notice; by virtue of which they authorize (DPL GROUP) to collect and process their personal data in accordance with the provisions for such purposes.

With regard to the procedure and requirements for exercising your ARCO rights, we inform you of the following:

1. a) By what means can the owner and, where applicable, their representative, prove their identity, as well as the latter’s legal status?

With a copy of their voter registration card, driver’s license, passport, immigration document, professional license, and/or any other document issued by a government authority with a photograph and, in the case of a representative of a third party, with a power of attorney signed before two witnesses or a public instrument, accompanied by a copy of the identification of the represented party.

A copy of your voter registration card, driver’s license, passport, immigration document, professional license, and/or any other document issued by a government authority with a photograph. If you are representing a third party, you must provide a power of attorney signed before two witnesses or a public instrument, accompanied by a copy of the identification of the person you are representing.

1. b) What information and/or documentation must the request contain?

Copies of the aforementioned documents, contact details, including name, address, and/or email address, and a specification of what is required. Likewise, and as a suggestion, you should indicate whether there is or was a legal relationship and/or how you believe we may have obtained your personal data.

1. c) How many days will it take us to respond to your request?

Twenty days from the date the request was received.

1. d) How will we communicate our response to your request?

Through the means provided by the owner, which may be their address or email address.

1. e) In what form can the personal data you request be reproduced?

By letter specifying what is requested or by email, as indicated by the owner.

1. f) We provide you with the following forms or systems to facilitate the exercise of ARCO rights:

1.-Your name, address, telephone number, and/or email address, which are essential for us to respond to you;

2.- Send a copy of your valid official ID (driver’s license, voter ID card, passport, professional license). If ARCO rights are exercised through a representative, the following must be previously verified: the identity of the owner, the identity of the representative, and the existence of the representation, by means of a public instrument or power of attorney signed before two witnesses, or a statement made in person by the owner; 3.- A clear and precise description of the personal data you wish to access, rectify, cancel, or oppose its use; 4.- Any element or document that facilitates the location of the personal data.

NOTIFICATION OF CHANGES TO THE PRIVACY NOTICE.

(DPL GROUP) reserves the right to modify the terms of this Notice to adapt it to new legislation or case law, as well as to industry practices. In such cases, (DPL GROUP) will publish these changes on our Website or Internet page (www.digitalsummitlatam.com), or you will be notified by email if the Owner has provided one.

This Privacy Notice may be modified from time to time by (DPL GROUP) in accordance with new administrative or legal provisions that may apply in this regard or any other means of oral, printed, or electronic communication that is legally permitted for such purposes.

Last updated: September 9, 2025